CVE-2013-4113 in PHP
摘要 (英语)
ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function.
预定
2013-06-12
披露
2013-07-13
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 9523 | PHP xml.c xml_parse_into_struct 内存损坏 | 119 | 概念验证 | 官方修复 | CVE-2013-4113 |